ZyXEL Communications P-2608HWL-D1, User Manual

Page: 238 / 451

P-2608HWL-Dx Series User’s Guide
238 Chapter 18 IPSec VPN
Figure 128 Advanced VPN Policies
The following table describes the fields in this screen.
Table 85 Advanced VPN Policies
LABEL DESCRIPTION
VPN - IKE
Protocol Enter 1 for ICMP, 6 for TCP, 17 for UDP, etc. 0 is the default and signifies any
protocol.
Enable Replay
Detection
As a VPN setup is processing intensive, the system is vulnerable to Denial of
Service (DoS) attacks The IPSec receiver can detect and reject old or duplicate
packets to protect against replay attacks. Select YES from the drop-down menu to
enable replay detection, or select NO to disable it.
Local Start Port 0 is the default and signifies any port. Type a port number from 0 to 65535. Some
of the most common IP ports are: 21, FTP; 53, DNS; 23, Telnet; 80, HTTP; 25,
SMTP; 110, POP3.
End Enter a port number in this field to define a port range. This port number must be
greater than that specified in the previous field. If Local Start Port is left at 0, End
will also remain at 0.
Remote Start Port 0 is the default and signifies any port. Type a port number from 0 to 65535. Some
of the most common IP ports are: 21, FTP; 53, DNS; 23, Telnet; 80, HTTP; 25,
SMTP; 110, POP3.
End Enter a port number in this field to define a port range. This port number must be
greater than that specified in the previous field. If Remote Start Port is left at 0,
End will also remain at 0.
Phase 1